Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35302e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e35302e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          ncJEaG9lBedQ2V8MSOdB03Fnye5371/Em6c77ewxgcE=
Subject key identifier:   E0:80:6B:89:DF:BA:76:F1:EE:98:BB:68:CF:C6:D1:92:08:C8:56:A4
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       0E7AE2F08652D432CDA760F85CDF59B6707E9CD2
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35302e302f32342d3234203d3e203435333132.roa
Signing time:             Fri 24 Oct 2025 08:02:54 +0000
ROA not before:           Fri 24 Oct 2025 07:57:54 +0000
ROA not after:            Fri 23 Oct 2026 08:02:54 +0000
asID:                     45312
IP address blocks:        202.81.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Nov 2025 21:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7a:e2:f0:86:52:d4:32:cd:a7:60:f8:5c:df:59:b6:70:7e:9c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Oct 24 07:57:54 2025 GMT
            Not After : Oct 23 08:02:54 2026 GMT
        Subject: CN=E0806B89DFBA76F1EE98BB68CFC6D19208C856A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:32:6e:a2:b2:92:34:fc:16:e6:e3:3a:99:6d:
                    dd:49:f5:04:8d:a3:97:a3:b4:55:7d:c4:b5:f0:1e:
                    b0:07:e7:31:27:bd:bf:d7:21:fe:c6:71:38:ac:60:
                    27:d3:76:6c:f8:c9:8c:4e:ee:95:0f:63:d3:4f:6a:
                    64:dd:0b:1c:dc:8c:69:13:14:53:52:c1:e7:d0:53:
                    90:c2:f7:03:7e:24:e9:fc:d3:99:a6:8f:be:ed:e4:
                    ea:70:ef:90:c3:7c:76:4e:8b:d9:f5:47:a2:b4:97:
                    25:9f:bd:44:89:84:6c:04:3f:09:8b:95:2a:a8:12:
                    d8:50:fd:3e:94:d3:e1:1a:d9:fe:35:27:ee:5e:ab:
                    8c:2d:7d:69:c4:cd:1a:55:6c:64:e8:8b:93:69:f8:
                    e3:b9:49:8a:e7:ef:b5:de:cb:13:e5:29:59:bd:a8:
                    59:00:c1:2e:d5:21:87:7d:a1:73:14:7d:13:14:e3:
                    fd:55:fd:24:cc:1a:a2:0c:ba:27:6c:81:eb:60:3b:
                    a3:81:23:ea:3a:e4:f8:35:0a:90:e8:16:0b:7f:78:
                    02:77:da:26:89:a2:ac:a5:65:c9:e3:aa:86:1d:ce:
                    07:aa:77:1d:1e:f5:1e:76:9b:00:e8:03:50:ca:18:
                    5f:7d:e7:ca:90:0f:b8:e6:7d:80:4f:09:20:ce:2a:
                    3a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:80:6B:89:DF:BA:76:F1:EE:98:BB:68:CF:C6:D1:92:08:C8:56:A4
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35302e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:f4:e1:3d:a6:1d:ab:53:f7:4d:dd:49:dd:c1:a9:fa:4e:56:
         51:99:92:14:c8:e8:0c:5c:a9:8f:05:6b:5c:bf:e8:4e:78:f7:
         35:4b:ed:07:02:ba:85:1e:10:d7:bd:da:29:46:11:a2:71:20:
         e5:48:64:58:d4:df:1c:2c:bb:ec:fd:a3:31:1b:24:84:92:94:
         21:e3:26:2c:81:35:ad:46:ff:65:62:6e:50:b2:dc:75:e5:9b:
         59:1b:b7:c5:f8:46:c0:28:27:8b:c3:de:5f:65:d7:ca:73:41:
         a6:27:e4:bf:5a:8e:3d:a5:5f:4c:4d:71:71:dd:16:df:c6:9f:
         bd:cd:44:0f:62:ad:e3:cc:c9:fa:ab:76:7a:5c:b8:18:0d:dd:
         26:5c:4b:7b:2e:18:21:ab:3a:ab:5c:56:20:e7:63:9f:12:4c:
         88:2d:a6:ec:02:d3:b4:e0:17:c5:41:3e:73:67:f4:cc:4f:8c:
         49:90:69:10:e2:9d:0c:9c:4e:da:c9:9c:b6:16:e4:1e:4a:7f:
         1d:00:50:5b:5f:ef:af:5b:d1:db:f9:e0:2a:6d:a0:38:db:37:
         74:14:bb:a0:b0:b1:81:13:9c:13:6f:ab:e9:73:e2:c2:9a:e6:
         f7:2d:60:4e:22:b3:5a:ba:24:af:8c:c2:fe:ca:ba:66:1c:c3:
         e6:30:35:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 03:55:45 2025 by rpki-client